Category: Cyber Security News

Pentesting remains highly effective at finding real-world weaknesses, but traditional delivery relies on manual documents and email threads that cause delays and inefficiencies. This guide explains how Automating Pentest Delivery—real-time findings, auto-routing, automatic remediation tickets, validation workflows, and continuous SLA tracking—turns reporting into an immediate, collaborative process. #Pentest #AutomatingPentestDelivery

Microsoft released the optional Windows 11 preview update KB5083631, introducing 34 quality improvements such as a new Xbox mode, haptic feedback, faster startup app launches, and enhanced batch file security. The update is non-security, intended for testing before Patch Tuesday, and also rolls out updated Secure Boot certificates while potentially triggering BitLocker recovery on some server devices. #KB5083631 #SecureBoot

Microsoft updated its RemoveDefaultMicrosoftStorePackages policy to add a dynamic list that lets IT admins uninstall preinstalled MSIX/APPX Store apps by referencing each app’s Package Family Name (PFN) via Group Policy or a custom OMA-URI for MDM. The capability requires the April 2026 Windows non-security update (or March 13, 2026 Insider builds), extends policy support to Windows 11 24H2 Enterprise and Education, and will appear in Intune in coming months; admins can also remove Copilot with the RemoveMicrosoftCopilotApp policy after April 2026 patches. #RemoveDefaultMicrosoftStorePackages #Windows11

Cisco released an open-source Model Provenance Kit to generate fingerprints for third-party AI models and help organizations trace lineage, detect tampering, and assess risks. The toolkit compares model fingerprints and scans against Cisco’s database to mitigate security, compliance, and supply-chain issues associated with models from repositories like HuggingFace. #ModelProvenanceKit #HuggingFace…

Securonix has identified Deep#Door, a stealthy Python-based backdoor that gives attackers persistent remote command execution and extensive surveillance on Windows systems. The threat uses embedded Python in batch scripts, disables security controls, establishes multi-layered persistence, and employs advanced in-memory and evasion techniques to remain covert and resilient. #DeepDoor #Windows…

Two U.S. cybersecurity professionals, Ryan Goldberg and Kevin Martin, were each sentenced to four years in prison after pleading guilty to conspiracy to obstruct interstate commerce by extortion for their roles in ransomware attacks. They and a third colleague, Angelo Martino, used BlackCat and Alphv to target numerous victims, collected large…

Two former incident response employees from Sygnia and DigitalMint were sentenced to four years in prison after pleading guilty to conspiring to carry out BlackCat (ALPHV) ransomware attacks against multiple U.S. companies. They acted as BlackCat affiliates between May and November 2023, paying a 20% cut for access to the ransomware platform and targeting firms including a Tampa medical device manufacturer that paid $1.27 million. #BlackCat #ALPHV #Sygnia #DigitalMint

Threat actors compromised the PyTorch Lightning package on PyPI and pushed malicious versions 2.6.2 and 2.6.3 that auto-execute on import to deploy a Bun runtime and an obfuscated JavaScript payload for credential theft. The campaign validates and abuses stolen GitHub tokens to inject worm-like commits (impersonating Anthropic’s Claude Code), leverages an…

Industrialized cybercrime now leverages AI, automation, and data-sharing to conduct reconnaissance, exploit vulnerabilities, and monetize access at machine speed, collapsing time-to-exploit to hours or even minutes. Defenders must match that speed and scale with defensive AI, automation, identity-centric detection, and exposure reduction. #WormGPT #RedLine…

Anthropic has released Claude Security, a Claude Opus 4.7–powered defensive tool now in public beta that scans repositories for vulnerabilities, provides confidence-rated findings, explains repro steps, and generates targeted patch instructions. Partners, major security vendors, and consultancies are integrating Opus 4.7 and scheduling regular scans to help defenders close the gap…

Congress approved a 45-day extension of Section 702 of the Foreign Intelligence Surveillance Act — which authorizes warrantless surveillance of foreign targets whose communications can include Americans — hours before the law’s expiration. Lawmakers secured a commitment to seek rapid declassification of a Foreign Intelligence Surveillance Court opinion amid reported compliance problems and continuing debates over reforms and the Justice Department’s appeal. #Section702 #FISA

The FCC approved new regulations to strengthen telecoms’ Know Your Customer requirements, crack down on illegal robocalls, and restrict use of equipment and testing labs tied to foreign adversaries. The rules include tougher identity verification, potential penalties tied to illegal call volume, ending blanket authorization for certain foreign carriers, and refusing overseas labs without reciprocity agreements. #FCC #robocalling

Two former cybersecurity professionals who moonlighted as cybercriminals were each sentenced to four years in prison for a series of 2023 ransomware attacks that used ALPHV (BlackCat) to extort victims. Their attacks targeted medical, pharmaceutical, engineering and manufacturing organizations, resulted in at least a $1.3 million ransom payment in one case, and are linked to broader ALPHV activity including the Change Healthcare incident. #ALPHV #ChangeHealthcare

Bluekit is a new phishing kit offering more than 40 realistic templates targeting services like Gmail, Outlook, iCloud, GitHub, and Ledger, and it unifies domain registration, phishing page setup, campaign management, and real-time victim monitoring. Its AI Assistant supports multiple models (Llama, GPT-4.1, Claude, Gemini, DeepSeek) to draft phishing campaigns, but Varonis found the outputs were placeholder-heavy and experimental, highlighting a growing trend of AI-enabled cybercrime alongside tools like ATHR. #Bluekit #Varonis